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IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with str i kothrough . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

1 . (currently amended) An extended key preparing apparatus wherein extended 
keys are prepared in common key cryptosystem from a cryptographic key input, comprising: 

a dividing unit which divides binary d i g i t a bit string of said cryptographic key into a 
plurality of ele m e nts oaoh compos e d of bit groups, each bit group having a predetermined bit 
length; 

an intermediate data preparing unit which prepares a plurality of intermediate data by 
app l y i ng a p l urality of tim e s an oporat i on whoroin a prodotorm i nod constant i s usod to tho 
rospootivo o l omonts d i v i dod by sa i d div i ding uni t groups from the bit groups by a 
predetermined operation with different constant for each bit group, each intermediate data 
group having first intermediate data ; 

a selecting unit which selects a p l ura li ty of one item of the first intermediate data 
"correspond i ng to the numbor of stagos of oxtondod koys from th e p l ural i ty of tho int e rmed i ate 
data proparod by sa i d int e rm e d i ate data propar i ng un i t for each of the intermediate data 
groups depending on a number of stages of extended keys to determine second intermediate 
data ; and 

an extended key preparing unit which prepares the extended keys correspond i ng to 
sa i d numbor of stagoc having a bit length longer than the bit string of said cryptographic key 
by converting irreversibly the p l ura li ty of tho second intermediate data so l ootod by said 
so l oct i ng un i t. , wherein said intermediate data preparing unit is provided with a nonlinear type 
operating unit for effecting a nonlinear type operation with respect to each bit group to prepare 
the intermediate data groups. 

2. (canceled) 

3. (currently amended) An extended key preparing apparatus according to claim 2 
l^wherein said non l inoar typo oporat i ng un i t porforme non li n e ar typo oporat i on i n such a 
mannor that whon said cryptograph i c koy i s div i dod i nto o i ght o l omontc of 32 b i ts by sa i d d i v i d i ng 
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WHtr dividinq unit divides the bit string of said cryptographic key into eight of the bit groups, the 
predetermined bit length is 32 bits, and said nonlinear type operating unit separates said 
o l omonts e ach bit group into 6, 5, 5, 5, 5, and 6 bits to transpose the same into other data, 
respectively, and the data after transposition are subjected to nonlinear type operation by the 
use of a determinant. 

4. (currently amended) An extended key preparing apparatus according to claim 2 
Ij/vherein said intermediate data preparing unit is provided with: 

an addition unit which adds a first constant to an odd numbor - th o l omont o ven-numbered 
bit group t hat has been subjected to the nonlinear type operation to obtain a first result ; 

a multiplication unit which multiplies by a second constant an ovon numbor - th o l omont 
odd-numbered bit group which has been subjected to the nonlinear type operation by sa i d 
constan t to obtain a second result, wherein the odd number is the even number plus one : and 

an exclusive OR operating unit which effects exclusive OR operation of sa i d odd numbor - 
th o l omont to which has boon addod tho constant and said ovon numbor - th o l omont wh i ch i s 
succQoding to sa i d odd numb e r - th and to wh i ch has been mu l t i p li od by sa i d constan t the first 
result and the second result . 

5. (currently amended) An extended key preparing apparatus according to claim 4, 
comprising further a preparing unit for preparing the intermediate data group by subject i ng 
non li near typo oporation to th e nonlinearlv operating on a result of said exclusive OR operation 
of sa i d odd numbor - th o l omont and sa i d e v e n numbor - th o l omont wh i ch i s suooood i ng to said 
odd numbor - th . 

6. (currently amended) An extended key preparing apparatus according to claim 5 A 
wherein said addition unit and said multiplication unit repeat tl=>e-a_plurality of times additions and 
multiplications by the use of the number i of different constants, respectively, to prepare the 
number i of data in every ele m e nts bit group : said exclusive OR operating unit repeat repeats i 
times operations for acquiring exclusive OR of the odd numbor - th o l omont o ven-numbered bit 
group and the oven numbor - th o l omont odd-numbered bit group w hich have been operated by 
the use of the same constants; and said preparing unit prepare the number i of items of the first 
intermediate data in every o l omonts bit group . 
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7. (currently amended) An extended key preparing apparatus according to claim 6 A 
wherein said selecting unit selects one item of the first intermediate data corresponding to said 
number of stages of an extended key among the number i of items of the first intermediate data 
contained in the respective olomonts intermediate data groups w hich have been prepared by 
said intermediate data preparing unit. 

8. (currently amended) An extended key preparing apparatus according to claim 1 A 
wherein said extended key preparing unit is provided with: 

a rearrangement unit which rearranges a p l ura li ty of t he second intermediate data 
so l ootod by sa i d so l oot i ng uni tt o obtain a rearranged intermediate data ; and 

an irreversible conversion unit which converts irreversibly th e plura l ity of i ntormod i ato 
data that havo boon r e arrang e d by sa i d roarrangoment un i t the rearranged intermediate data . 

9. (currently amended) An extended key preparing apparatus according to claim 8 A 
wherein whon intormod i ato data aro roarrang e d i n an ord e r of ele ments X, Y, Z, and W by sa i d 
roarrangom e nt uni U he second intermediate data includes four items represented by four 
elements X, Y Z, and W, respectively, 

said rearrangement unit rearranges the four items, and 

said irreversible converting unit prepares a first data by adding the element Y to a data 
obtained by shifting cyclically the element X leftwards by 1 bit; prepares a second data 
determined by sifting cyclically the data leftwards by further 1 bit, which data has been obtained 
by subtracting the element W from a data obtained by shifting cyclically said -the element Z 
leftwards by 1 bit; and oporatos performs an exclusive OR ef -operation on said first data and 
said second data. 

10. (currently amended) An extended key preparing apparatus according to claim 1 A 
wherein said dividing unit divides a cryptographic key of 128 bits, 192 bits, or 256 bits into eight 
e l e ments groups of 32 bits. 

11 . (currently amended) An extended key preparing method wherein extended keys 
are prepared in common key cryptosystem from a cryptographic key input, comprising tho stops 
efri 

dividing b i nary d i g i t a bit string of said cryptographic key into a plurality of ele m e nts bit 
groups, each compocod of bit group having a predetermined bit length; 
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preparing a plurality of intermediate data by app l y i ng tho p l ura li ty of t i m e s an oporation 
wh e r ei n a pr e dotorm i nod oonctant i s usod to tho resp e ctiv e o l omonts div i d e d by sa i d d i v i d i ng 
ste pgroups from the bit groups by effecting a nonlinear type operation with different constant 
for each bit group, each intermediate data group having a first intermediate data ; 

selecting a p l ura li ty of one item of the first intermediate data correspond i ng to tho 
numbor of stag e s of oxtondod k e ys from th e p l ura li ty of th e intormod i ato data preparod by sa i d 
i ntormod i ato data pr e par i ng stop for each of the intermediate data groups depending on a 
number of stages of extended keys to determine second intermediate data : and 

preparing the extended keys corrospond i ng to sa i d numbor of stagos having a bit 
length longer than the bit string of said cryptographic key by converting irreversibly tho p l ura li ty 
e*-the second intermediate data so l octod by oa i d se l oot i ng stop . 

1 2. (canceled) 

1 3. (currently amended) An extended key preparing method according to claim 42 
11, wherein sa i d non l in e ar typo oporat i ng st e p p e rforms non li n e ar typo op e rat i on i n such a 
mannor that when sa i d cryptograph i c koy i s d i v i dod i nto oight o l omonts of 32 b i ts by sa i d d i v i d i ng 
stefr vsaid dividing includes dividing the bit string of said cryptographic key into eight of the bit 
groups, the predetermined bit length is 32 bits, and 

said non li noar typo oporat i ng st e p separatos e ffecting of the nonlinear type operation 
includes separating sa i d e l emonts o ach bit group into 6, 5, 5, 5, 5, and 6 bits to transpose the 
same into other data, respectively, and the data after transposition are subjected to a/ionlinear 
type operation by the use of a determinant. 

14. (currently amended) An extended key preparing method according to claim 42 
11, wherein said i ntormod i at e data p reparing 6t e p i nvolvos of the plurality of intermediate data 
groups includes^ 

an add i t i on stop for a dding a first constant to an odd numbor - th olomont o ven-numbered 
bit group t hat has been subjected to the nonlinear type operation to obtain a first result : 

a mu l t i p li cat i on stop for multiplying by a second constant an ovon numbor - th o l omont 
odd-numbered bit group w hich has been subjected to the nonlinear type operation by said 
constan tt o obtain a second result, wherein the odd number is the even number plus one : and 

an oxclusivo OR oporating stop for e ffecting an exclusive OR operation of sa i d odd 
numbor - th el emont to which has b ee n addod tho oonctant and sa i d oven numbor - th o l omont 
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wh i ch i s suooood i ng to said odd numbor - th and to wh i ch has boon mu l t i p li od by pa i d oonstant the 
first result and the second result . 

15. (currently amended) An extended key preparing method according to claim 14, 
further comprising furthor a stop for preparing the intermediate data group by subjoct i ng 
non li noar typo oporation to tho nonlinearly operating on a result of said exclusive OR operation 
of sa i d odd numbor - th o l om e nt and sa i d e v e n number - th ele m e nt wh i ch is cucoood i ng to sa i d 
odd numbor - th . 

16. (currently amended) An extended key preparing method according to claim 15 A 
wherein said addit i on stop adding and said mu l t i p li cat i on st e p multiplying ropoat th e includes 
repeating a p lurality of times additions and multiplications by the use of the number i of different 
constants, respectively, to prepare the number i of data in every o l omonts bit group ; said 
e xc l us i v e OR op e rat i ng st e p effecting of the exclusive OR operation f eeeat -includes repeating i 
times operations for acquiring exclusive OR of the odd numbor - th o l omont o ven-numbered bit 
group and the e v e n numb e r - th ele m e nt odd-numbered bit group w hich have been operated by 
the use of the same constants; and said preparing stee -of the intermediate data group by 
nonlinearly operating p r e par e includes preparing t he number i of intermediate data in every 
e l om e nts bit group . 

17. (currently amended) An extended key preparing method according to claim 16 A 
wherein said selecting st e p s ele cts includes selecting one item of the first intermediate data 
corresponding to said number of stages of an extended key among the number i of items of the 
first intermediate data contained in the respective olomonts intermediate data groups which have 
been prepared by said intermediate data preparing step. 

18. (currently amended) An extended key preparing method according to claim 11 A 
wherein said e xt e nd e d k e y preparing stop invo l ves: of the extended keys includes 

a r e arrangomont stop for rearranging a p l ura li ty of t he second intermediate data so l ootod 
by said s el ect i ng stop to obtain a rearranged intermediate data ; and 

an i rr e v e rsib l o oonvors i on stop for converting irreversibly tho p l ural i ty of i ntormod i ato data 
that havo boon roarranood by sa i d r e arrangomont stop the rearranged intermediate data . 
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19. (currently amended) An extended key preparing method according to claim 18 A 
wherein whon intormod i ato data aro roarrangod i n an ordor of olomonte X, Y, Z, and W by sa i d 
roarrangomont stop, t he second intermediate data includes four items represented by four 
elements X, Y Z, and W, respectively, 

said rearranging includes rearranging the four items, and 
said i rrovors i b le converting stop proparoc includes 

preparing a first data by adding the element Y to a data obtained by shifting 
cyclically the element X leftwards by 1 bit; prepares a second data determined by sifting 
cyclically the data leftwards by further 1 bit, which data has been obtained by subtracting the 
element W from a data obtained by shifting cyclically said -the element Z leftwards by 1 bit; and 
oporat e s performing an exclusive OR ef -operation on said first data and said 

second data. 

20. (currently amended) An extended key preparing method according to claim 11 A 
wherein said dividing step divides a cryptographic key of 128 bits, 192 bits, or 256 bits into eight 
olomonts groups of 32 bits. 

21 . (currently amended) A computer readable recording medium wherein an 
extended key preparing program in which extended keys are prepared in common key 
cryptosystem from a cryptographic key input is to be recorded, the program comprising program 
code means which when executed perform : 

r e cord i ng tho program conta i n i ng a d i v i d i ng st e p for dividing b i nary d i g i t a bit s tring of 
said cryptographic key into a plurality of ele m e nts bit groups, each oomposod of bit group 
having a predetermined bit length; 

an i ntermodiato data pr e par i ng st e p for preparing a plurality of intermediate data 
groups by app l y i ng tho p l ura l ity of t i m e s an oporat i on whoroin a pr e dotorm i nod constant i s 
usod to tho rospoot i vo o l omonts d i v i dod by sa i d d i v i d i ng step from the bit groups by effecting a 
nonlinear type operation with different constant for each bit group, each intermediate data 
group having a first intermediate data ; 

a so l oot i ng stop for so l oct i ng a p l ura li ty of one item of the first intermediate data 
corr e spond i ng to tho numbor of stag es of e xt e nd e d koys from tho p l ura li ty of tho i nt e rmod i ato 
data pr e parod by said i ntormod i ate data propar i ng stop f or each of the intermediate data 
groups depending on a number of stages of extended keys to determine second intermediate 
data ; and 
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an e xt e ndod koy prepar i ng stop for preparing the extended keys correspond i ng to sa i d 
numb e r of stagos having a bit length longer than the bit string of said cryptographic key by 
converting irreversibly tho p l ural i ty of t he second intermediate data s el ectod by sa i d so l ooting 

22. (currently amended) An extended key preparing program in which extended keys 
are prepared in common key cryptosystem from a cryptographic key input, the program 
comprising program code means which when executed perform : 

rooord i ng tho program containing a d i v i d i ng stop for dividing b i nary d i g i t a bit string of 
said cryptographic key into a plurality of e l omonts bit groups, each composod of bit group 
having a predetermined bit length; 

an i ntormod i at e data propar i ng stop for preparing a plurality of intermediate data 
groups by app l y i ng th e p l ura li ty of t i mos an oporat i on where i n a prodotorminod constant i s 
us e d to tho rospoot i vo o l omonts d i v i dod by said d i v i d i ng st e p f rom the bit group by effecting a 
nonlinear type operation with different constant for each bit group, each intermediate data 
group having first intermediate data : 

a so l oot i ng step for selecting a p l ural i ty of one item of the intermediate data 
correspond i ng to tho numbor of stagos of oxtondod koys from tho p l ura li ty of tho i ntormod i ato 
data propar e d by said i nt e rmod i ato data propar i ng stop f or each of the intermediate data 
groups depending on a number of stages of extended keys to determine second intermediate 
data : and 

an oxtondod koy pr e par i ng stop for preparing the extended keys corr e spond i ng to sa i d 
numbor of stagos having a bit length longer than the bit string of said cryptographic key by 
converting irreversibly th e p l ura li ty of t he second intermediate data so l ootod by sa i d so l oot i ng 

23. (new) An extended key preparing apparatus wherein extended keys are prepared 
in common key cryptosystem from a cryptographic key input, comprising: 

a dividing unit which divides binary digit string of said cryptographic key into a plurality 
of elements each composed of a predetermined bit length; 

an intermediate data preparing unit which prepares a plurality of intermediate data by 
applying a plurality of times an operation wherein a predetermined constant is used to the 
respective elements divided by said dividing unit, said intermediate data preparing unit being 
provided with a nonlinear type operating unit for effecting nonlinear type operation with respect 
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to the respective elements divided by said dividing unit, said nonlinear type operating unit 
performing nonlinear type operation in such a manner that when said cryptographic key is 
divided into eight elements of 32 bits by said dividing unit, said nonlinear type operating unit 
separates said elements into 6, 5, 5, 5, 5, and 6 bits to transpose the same into other data, 
respectively, and the data after transposition are subjected to nonlinear type operation by the 
use of a determinant 

a selecting unit which selects a plurality of intermediate data corresponding to the 
number of stages of extended keys from the plurality of the intermediate data prepared by said 
intermediate data preparing unit; and 

an extended key preparing unit which prepares the extended keys corresponding to 
said number of stages by converting irreversibly the plurality of the intermediate data selected 
by said selecting unit. 

24. (new) An extended key preparing method wherein extended keys are prepared in 
common key cryptosystem from a cryptographic key input, comprising the steps of, 

dividing binary digit string of said cryptographic key into a plurality of elements each 
composed of a predetermined bit length; 

preparing a plurality of intermediate data by applying the plurality of times an operation 
wherein a predetermined constant is used to the respective elements divided by said dividing 
step, said preparing involving a nonlinear type operating step for effecting nonlinear type 
operation with respect to the respective elements divided by said dividing step, said nonlinear 
type operating step performing a nonlinear type operation in such a manner that when said 
cryptographic key is divided into eight elements of 32 bits by said dividing step, said nonlinear 
type operating step separates said elements into 6, 5, 5, 5, 5, and 6 bits to transpose the same 
into other data, respectively, and the data after transposition are subjected to nonlinear type 
operation by the use of a determinant; 

selecting a plurality of intermediate data corresponding to the number of stages of 
extended keys from the plurality of the intermediate data prepared by said intermediate data 
preparing step; and 

preparing the extended keys corresponding to said number of stages by converting 
irreversibly the plurality of the intermediate data selected by said selecting step. 
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